{"action":"created","issue":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2115","repository_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide","labels_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2115/labels{/name}","comments_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2115/comments","events_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2115/events","html_url":"https://github.com/OpenSCAP/scap-security-guide/issues/2115","id":238661738,"number":2115,"title":"TMOUT checks should be removed","user":{"login":"kenglish-pfi","id":13768667,"avatar_url":"https://avatars0.githubusercontent.com/u/13768667?v=3","gravatar_id":"","url":"https://api.github.com/users/kenglish-pfi","html_url":"https://github.com/kenglish-pfi","followers_url":"https://api.github.com/users/kenglish-pfi/followers","following_url":"https://api.github.com/users/kenglish-pfi/following{/other_user}","gists_url":"https://api.github.com/users/kenglish-pfi/gists{/gist_id}","starred_url":"https://api.github.com/users/kenglish-pfi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kenglish-pfi/subscriptions","organizations_url":"https://api.github.com/users/kenglish-pfi/orgs","repos_url":"https://api.github.com/users/kenglish-pfi/repos","events_url":"https://api.github.com/users/kenglish-pfi/events{/privacy}","received_events_url":"https://api.github.com/users/kenglish-pfi/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-06-26T20:35:22Z","updated_at":"2017-06-27T15:28:34Z","closed_at":null,"body":"TMOUT harkens from the era of the VT-100 terminal.  No other application suffers this ridiculous burden.  Email doesn't exit after 15 minutes of inactivity, your editor doesn't exit after 15 minutes of inactivity.  Why do we still apply this onerous requirement to the shell?  When was the last time you saw a terminal hooked directly into a server on a serial port?  I spend more time logging in to some systems than I do working on them because no one dares admit that this setting is no longer needed.  Stop the madness.  Just because this setting was a good idea in 1978 does not mean it is a good idea today.  Shell inactivity once meant that the user had walked away from their console while logged in.  It no longer means this.  My shell windows are protected by the same screen lock as my email application:  my locking screen saver."},"comment":{"url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/comments/311394786","html_url":"https://github.com/OpenSCAP/scap-security-guide/issues/2115#issuecomment-311394786","issue_url":"https://api.github.com/repos/OpenSCAP/scap-security-guide/issues/2115","id":311394786,"user":{"login":"kenglish-pfi","id":13768667,"avatar_url":"https://avatars0.githubusercontent.com/u/13768667?v=3","gravatar_id":"","url":"https://api.github.com/users/kenglish-pfi","html_url":"https://github.com/kenglish-pfi","followers_url":"https://api.github.com/users/kenglish-pfi/followers","following_url":"https://api.github.com/users/kenglish-pfi/following{/other_user}","gists_url":"https://api.github.com/users/kenglish-pfi/gists{/gist_id}","starred_url":"https://api.github.com/users/kenglish-pfi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kenglish-pfi/subscriptions","organizations_url":"https://api.github.com/users/kenglish-pfi/orgs","repos_url":"https://api.github.com/users/kenglish-pfi/repos","events_url":"https://api.github.com/users/kenglish-pfi/events{/privacy}","received_events_url":"https://api.github.com/users/kenglish-pfi/received_events","type":"User","site_admin":false},"created_at":"2017-06-27T15:28:33Z","updated_at":"2017-06-27T15:28:33Z","body":"It is not easily overwritten by unprivileged users.  The environment variable is set as read-only in a system file that an unprivileged user cannot change.  The shells that an unprivileged user are allowed to choose from all respect this value.  (It wouldn't bother me nearly as much if it were easily overridden).  \"Fixing\" this requires debugging your own login shell and poking the memory address of the value checked by the branch condition.  Most production systems don't have gdb installed."}}
{"actor":{"display_login":"kenglish-pfi"}}